Vulnerabilities

TI-2011-03242 CVE-2011-3685 · GHSA-mrmg-wcfw-pvrm

Tembria Server Monitor before 6.0.5 Build 2252 uses a substitution cipher to encrypt…

LOW 10

Tembria Server Monitor before 6.0.5 Build 2252 uses a substitution cipher to encrypt application credentials, which allows local users to obtain sensitive information by leveraging read access to (1) authentication.dat o…

CVSS 2.0LOW 1.9 Local No auth Interaction — EPSS 0.00282 Published 2011-09-27 No fix listed CWE-310

TI-2011-03241 CVE-2011-3684 · GHSA-cx8w-g77g-qgr6

Multiple cross-site scripting (XSS) vulnerabilities in Tembria Server Monitor before…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Tembria Server Monitor before 6.0.5 Build 2252 allow remote attackers to inject arbitrary web script or HTML via (1) the siteid parameter to logbook.asp, (2) the sit…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01308 Published 2011-09-27 No fix listed CWE-79

TI-2010-01271 CVE-2010-1316 · GHSA-qp7h-f5xx-wvcg

Multiple stack-based buffer overflows in Tembria Server Monitor before 5.6.1 allow remote…

LOW 35

Multiple stack-based buffer overflows in Tembria Server Monitor before 5.6.1 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted (1) GET, (2) PUT, or (3) HE…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.09693 Published 2010-04-14 No fix listed CWE-119

Vulnerabilities

Filters

Tembria Server Monitor before 6.0.5 Build 2252 uses a substitution cipher to encrypt…

Multiple cross-site scripting (XSS) vulnerabilities in Tembria Server Monitor before…

Multiple stack-based buffer overflows in Tembria Server Monitor before 5.6.1 allow remote…